eset nod32 antivirus 8.0日志文件，全盘扫描没有任何问题。
<?xml version="1.0" encoding="utf-8" ?><ESET>
<LOG>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/6/2</DATE>
<TIME>2:27:52</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">7D8F4C09DB97934477916D91655F0D540AC65B2C</COLUMN>
<COLUMN NAME="此处首次所见">2017/6/2 10:27:50</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/6/2</DATE>
<TIME>2:27:43</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">D505F5D80506E62FCE6A771D4EFA8541BCC68E16</COLUMN>
<COLUMN NAME="此处首次所见">2017/6/2 10:27:42</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/6/2</DATE>
<TIME>2:27:42</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">57FB23B548B3564CB0AEF4A42677D4CDEE7B8211</COLUMN>
<COLUMN NAME="此处首次所见">2017/6/2 10:27:40</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/6/2</DATE>
<TIME>2:27:37</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/6/2 10:27:36</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/6/2</DATE>
<TIME>2:27:00</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/6/2 10:26:58</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/31</DATE>
<TIME>0:36:51</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">7D8F4C09DB97934477916D91655F0D540AC65B2C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/31 8:36:50</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/31</DATE>
<TIME>0:35:11</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">D505F5D80506E62FCE6A771D4EFA8541BCC68E16</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/31 8:35:09</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/31</DATE>
<TIME>0:35:09</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\system32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">57FB23B548B3564CB0AEF4A42677D4CDEE7B8211</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/31 8:35:07</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/31</DATE>
<TIME>0:34:34</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/31 8:34:33</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/31</DATE>
<TIME>0:34:25</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\system32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/31 8:34:23</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/30</DATE>
<TIME>8:33:34</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">7D8F4C09DB97934477916D91655F0D540AC65B2C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/30 16:33:32</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/30</DATE>
<TIME>8:31:53</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">D505F5D80506E62FCE6A771D4EFA8541BCC68E16</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/30 16:31:51</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/30</DATE>
<TIME>8:31:51</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">57FB23B548B3564CB0AEF4A42677D4CDEE7B8211</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/30 16:31:50</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/30</DATE>
<TIME>8:31:16</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/30 16:31:15</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/30</DATE>
<TIME>8:31:06</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/30 16:31:03</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/23</DATE>
<TIME>8:19:51</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">4B9C64B2B715F2A33C9DCCFDC5AE11D4870AE00C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/23 16:19:50</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/23</DATE>
<TIME>8:19:49</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">C88C85401A8BF5139755FB0B91C10ACE84D420BB</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/23 16:19:48</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/23</DATE>
<TIME>8:19:48</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\system32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">B18A11CE86B9339A0F37E08059DB120365B44FA9</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/23 16:19:46</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/23</DATE>
<TIME>8:19:45</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/23 16:19:44</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/23</DATE>
<TIME>8:19:38</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\system32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/23 16:19:37</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>22:41:25</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">4B9C64B2B715F2A33C9DCCFDC5AE11D4870AE00C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/22 6:41:24</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>22:41:21</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">C88C85401A8BF5139755FB0B91C10ACE84D420BB</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/22 6:41:20</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>22:41:20</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\system32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">B18A11CE86B9339A0F37E08059DB120365B44FA9</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/22 6:41:19</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>22:41:17</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/22 6:41:16</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>22:41:09</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\system32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/22 6:41:08</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>5:16:37</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">4B9C64B2B715F2A33C9DCCFDC5AE11D4870AE00C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/21 13:16:36</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>5:16:33</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">C88C85401A8BF5139755FB0B91C10ACE84D420BB</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/21 13:16:32</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>5:16:32</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\system32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">B18A11CE86B9339A0F37E08059DB120365B44FA9</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/21 13:16:31</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>5:16:29</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/21 13:16:28</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/21</DATE>
<TIME>5:16:21</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\system32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/21 13:16:20</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/19</DATE>
<TIME>14:02:23</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">4B9C64B2B715F2A33C9DCCFDC5AE11D4870AE00C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/19 22:02:21</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/19</DATE>
<TIME>14:02:19</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">C88C85401A8BF5139755FB0B91C10ACE84D420BB</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/19 22:02:17</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/19</DATE>
<TIME>14:02:17</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">B18A11CE86B9339A0F37E08059DB120365B44FA9</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/19 22:02:15</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/19</DATE>
<TIME>14:02:14</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/19 22:02:13</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/19</DATE>
<TIME>14:02:06</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/19 22:02:04</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/14</DATE>
<TIME>9:43:44</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">4B9C64B2B715F2A33C9DCCFDC5AE11D4870AE00C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/14 17:43:43</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/14</DATE>
<TIME>9:43:41</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">C88C85401A8BF5139755FB0B91C10ACE84D420BB</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/14 17:43:39</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/14</DATE>
<TIME>9:43:39</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">B18A11CE86B9339A0F37E08059DB120365B44FA9</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/14 17:43:38</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/14</DATE>
<TIME>9:43:37</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/14 17:43:35</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/14</DATE>
<TIME>9:43:29</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/14 17:43:26</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/12</DATE>
<TIME>3:13:51</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">4B9C64B2B715F2A33C9DCCFDC5AE11D4870AE00C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/12 11:13:50</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/12</DATE>
<TIME>3:13:48</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">C88C85401A8BF5139755FB0B91C10ACE84D420BB</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/12 11:13:46</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/12</DATE>
<TIME>3:13:46</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">B18A11CE86B9339A0F37E08059DB120365B44FA9</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/12 11:13:45</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/12</DATE>
<TIME>3:13:44</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/12 11:13:42</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/12</DATE>
<TIME>3:13:36</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/12 11:13:34</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/11</DATE>
<TIME>10:17:58</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">4B9C64B2B715F2A33C9DCCFDC5AE11D4870AE00C</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/11 18:17:57</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/11</DATE>
<TIME>10:17:55</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">C88C85401A8BF5139755FB0B91C10ACE84D420BB</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/11 18:17:53</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/11</DATE>
<TIME>10:17:53</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp3.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">B18A11CE86B9339A0F37E08059DB120365B44FA9</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/11 18:17:52</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/11</DATE>
<TIME>10:17:51</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/11 18:17:49</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/11</DATE>
<TIME>10:17:43</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/11 18:17:41</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/6</DATE>
<TIME>17:08:58</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy2.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">E638275A9F1EDCA5DCE9FBE42093A606A6C54E22</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/7 1:08:56</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/6</DATE>
<TIME>17:08:54</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp2.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">F0D1472D26DF8D114B22614A11E42B3E437B7D7A</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/7 1:08:53</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/6</DATE>
<TIME>17:08:53</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp2.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">0DB252EB8E97E11BF3365219AD85DBC9FFA2F2FE</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/7 1:08:51</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/6</DATE>
<TIME>17:08:50</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/7 1:08:49</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/6</DATE>
<TIME>17:08:42</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/7 1:08:41</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/4</DATE>
<TIME>11:30:11</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zysvchest.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F58B988CC046DF85C0C77219B8F30278DAB52291</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/4 19:30:10</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/4</DATE>
<TIME>11:30:07</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xpsvchest.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">06FFAE01F17B0C2043212D8EB7F05C5FE019D682</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/4 19:30:06</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/4</DATE>
<TIME>11:30:06</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xpsvchest.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">E983F16E1BDD23ED08DE969278D98ED74FDD57BF</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/4 19:30:04</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/4</DATE>
<TIME>11:30:03</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/4 19:30:01</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/5/4</DATE>
<TIME>11:29:55</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/5/4 19:29:53</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/11</DATE>
<TIME>11:46:18</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/11 19:46:16</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/11</DATE>
<TIME>11:46:14</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/11 19:46:12</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/11</DATE>
<TIME>11:46:12</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/11 19:46:11</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/11</DATE>
<TIME>11:46:09</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/11 19:46:08</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/11</DATE>
<TIME>11:46:01</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/11 19:45:59</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/7</DATE>
<TIME>13:09:54</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/7 21:09:53</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/7</DATE>
<TIME>13:09:50</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/7 21:09:49</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/7</DATE>
<TIME>13:09:48</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/7 21:09:47</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/7</DATE>
<TIME>13:09:45</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/7 21:09:44</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/7</DATE>
<TIME>13:09:37</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/7 21:09:35</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/6</DATE>
<TIME>10:43:34</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/6 18:43:32</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/6</DATE>
<TIME>10:43:29</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/6 18:43:28</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/6</DATE>
<TIME>10:43:27</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/6 18:43:26</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/6</DATE>
<TIME>10:43:24</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/6 18:43:23</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/6</DATE>
<TIME>10:43:16</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/6 18:43:14</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/5</DATE>
<TIME>14:09:46</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 22:09:45</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/5</DATE>
<TIME>14:09:43</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 22:09:41</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/5</DATE>
<TIME>14:09:41</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 22:09:40</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/5</DATE>
<TIME>14:09:38</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 22:09:36</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/5</DATE>
<TIME>14:09:29</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 22:09:28</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/4</DATE>
<TIME>17:55:05</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 1:55:04</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/4</DATE>
<TIME>17:55:01</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 1:55:00</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/4</DATE>
<TIME>17:55:00</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 1:54:58</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/4</DATE>
<TIME>17:54:57</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 1:54:55</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/4</DATE>
<TIME>17:54:48</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/5 1:54:46</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/3</DATE>
<TIME>19:56:06</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/4 3:56:05</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/3</DATE>
<TIME>19:56:02</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/4 3:56:01</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/3</DATE>
<TIME>19:56:01</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/4 3:56:00</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/3</DATE>
<TIME>19:55:58</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/4 3:55:58</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/4/3</DATE>
<TIME>19:55:51</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/4 3:55:50</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/31</DATE>
<TIME>18:41:28</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/1 2:41:27</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/31</DATE>
<TIME>18:41:24</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/1 2:41:23</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/31</DATE>
<TIME>18:41:23</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/1 2:41:21</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/31</DATE>
<TIME>18:41:20</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/1 2:41:18</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/31</DATE>
<TIME>18:41:11</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/4/1 2:41:10</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/24</DATE>
<TIME>15:25:36</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/24 23:25:35</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/24</DATE>
<TIME>15:25:32</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/24 23:25:31</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/24</DATE>
<TIME>15:25:30</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/24 23:25:29</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/24</DATE>
<TIME>15:25:27</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/24 23:25:26</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/24</DATE>
<TIME>15:25:19</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/24 23:25:17</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/12</DATE>
<TIME>19:13:37</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\zy22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Windows\System32\cmd.exe (0F3C4FF28F354AEDE202D54E9D1C5529A3BF87D8).</COLUMN>
<COLUMN NAME="哈希">F5F53910E1477A9919A5A91379509E1CD8BEDDA2</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/13 3:13:36</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/12</DATE>
<TIME>19:13:32</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">70D342479B8A2934AD73F7564A31283F47EABE11</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/13 3:13:31</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/12</DATE>
<TIME>19:13:31</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\xp22.exe</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NOK 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">4E537CFE1E5081C1FC231B915CBF0948C7C2C592</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/13 3:13:30</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/12</DATE>
<TIME>19:13:28</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\WINDOWS\system32\us.dat</COLUMN>
<COLUMN NAME="威胁">BAT/TrojanDownloader.Ftp.NLV 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在应用程序新建的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">CDD8FB4133CEC529558F5AF19BD7B358ED24BB2B</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/13 3:13:27</COLUMN>
</RECORD>
<RECORD>
<COLUMN NAME="时间">
<DATE>2017/3/12</DATE>
<TIME>19:13:19</TIME>
</COLUMN>
<COLUMN NAME="扫描程序">文件系统实时防护</COLUMN>
<COLUMN NAME="对象类型">文件</COLUMN>
<COLUMN NAME="对象">C:\Windows\System32\FuckGOthin.inf</COLUMN>
<COLUMN NAME="威胁">INF/Agent.A 特洛伊木马</COLUMN>
<COLUMN NAME="操作">通过删除清除</COLUMN>
<COLUMN NAME="用户">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="信息">在被应用程序修改的文件上发生事件: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (443E66BB1217F7637D6180F904B8EF67A60288B8).</COLUMN>
<COLUMN NAME="哈希">09E9B176CEFE661646213D0915532C0C130D2536</COLUMN>
<COLUMN NAME="此处首次所见">2017/3/13 3:13:18</COLUMN>
</RECORD>
</LOG>
</ESET>
检测引擎: 15515 (20170601)
快速响应模块: 10157 (20170601)
更新模块: 1069 (20161122)
病毒和间谍软件扫描程序模块: 1520 (20170510)
高级启发式扫描模块: 1177 (20170220)
压缩文件支持模块: 1263 (20170424)
清除器模块: 1135 (20170505)
反隐藏支持模块: 1112 (20170505)
ESET SysInspector 模块: 1269 (20170321)
文件系统实时防护模块: 1014 (20160223)
翻译支持模块: 1599 (20170504)
HIPS 支持模块: 1285 (20170529)
Internet 防护模块: 1303.1 (20170516)
数据库模块: 1089 (20170412)
LiveGrid 通信模块: 1022 (20160401)
专用清理器模块: 1012 (20160405)
Rootkit 删除和清除模块: 1017 (20170518)
网络防护模块: 1445 (20170531)
加密协议支持模块: 1010 (20170109) 这个问题很深奥哦{:2_378:}
页:
[1]